CVE-2010-3711: Input Validation
libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a crafted message, related to the plugins for MSN, MySpaceIM, XMPP, and Yahoo! and the NTLM authentication support.
Other sources
Pidgin did not sanitize output of Base64 decode operation prior its further processing. A remote attacker, valid Pidgin user, could use this flaw to cause:
a, NULL pointer dereference (pidgin daemon crash) by transfering of a specially-crafted buddy icon via the Yahoo protocol plugin
b, NULL pointer dereference (pidgin deamon crash) by providing a specially-crafted IP address value for peer-to-peer connection in the Yahoo protocol plugin
c, NULL pointer dereference (pidgin daemon crash) by providing a specially-crafted transfer header in the MSN protocol plugin
d, NULL pointer dereference (pidgin daemon crash) by providing a specially-crafted login challenge value in the MySpace protocol plugin
e, NULL pointer dereference (pidgin daemon crash) by providing a specially-crafted Digest-MD5 authentication challenge in the XMPP protocol plugin
Note: This crash can happen only when Cyrus SASL is not available or does not provide Digest-MD5 support
f, NULL pointer dereference (pidgin daemon crash) by providing a specially-crafted Type 2 message by authentication via the NTLM protocol
Acknowledgements:
Red Hat would like to thank the Pidgin project for reporting these issues. Upstream acknowledges Daniel Atallah as the original reporter.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3711?
CVE-2010-3711 has been classified as a denial-of-service vulnerability, which can result in application crashes.
How do I fix CVE-2010-3711?
To fix CVE-2010-3711, upgrade to Pidgin version 2.7.4 or later, which resolves the issue.
What versions of Pidgin are affected by CVE-2010-3711?
CVE-2010-3711 affects Pidgin versions prior to 2.7.4, including several earlier versions such as 2.5.0 to 2.7.3.
Can CVE-2010-3711 be exploited remotely?
Yes, CVE-2010-3711 can be exploited by remote authenticated users through crafted messages.
What are the risks associated with CVE-2010-3711?
The main risk associated with CVE-2010-3711 is a denial of service, which can disrupt user access to the application.